All you need to do is to mark the properties of the resource as needing to go through the secret engine